New Alerts for F5, vm2, Google Chrome (Exploit), and Linux.
F5
BIG-IP Next SPK and F5OS contain a vulnerability in urllib3 that allows a remote attacker to inject additional HTTP headers via the HTTP method and perform a smuggling attack and/or allow a client to bypass HTTP headers with security purpose. Highest CVSSv3 score of 6.5.
More info.
a vulnerability in exception sanitization of vm2 allows a remote attacker to raise an unsanitized host exception inside which can be used to escape the sandbox and run arbitrary code in host context. CVSSv3 score of 9.8
More info.
Google has updated Chrome for Desktop to fix 8 security vulnerabilities. At least one is exploited in the wild.
More info.
SUSE has updated the kernel. More info.
Red Hat has updated the kernel. More info.
Ubuntu has updated the kernel. More info.
Comments